Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.
CWE-346, CWE-346